CVE-2023-4958

No fix known EPSS <1%CVSS 6.1

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

Published 2023-12-12 · CVE record · OSV

Products: Red Hat Advanced Cluster Security 4.2, Red Hat Advanced Cluster Security 3